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DETAILED ACTION 

Claim Rejections - 35 USC §112 

1 . The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claim 10 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 

for failing to particularly point out and distinctly claim the subject matter which applicant 

regards as the invention. Claim 10 recites a "computer-like readable medium." 

"Computer-like" is indefinite, perse. 

2. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

3. Clajm 5 is rejected under 35 U.S.C. 112, first paragraph, as failing to comply with 
the enablement requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to enable one skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and/or use the invention. 
"Formatting said data belonging to said content provider" is not discussed in the 
specification. One of ordinary skill in the art would not be able to determine the scope 
of "formatting data" as is presented within claim 5. Per page 10, lines 13-15 of the 
instant application, "...the requested data is formatted by the SP and personalized..." 
does not define "formatting" beyond its dictionary definition, which leaves endless 
possibilities as to its meaning. 
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Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claim 10 is rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. Specifically, Claim 10 is directed to 
"instructions" stored in a "computer-like readable medium". Generally, functional 
descriptive material, such as a computer program, is statutory when it is stored on a 
tangible computer readable medium. See MPEP § 2106 IV.B.I(a). However, in the 
present application, the specification does not define "computer-like readable medium." 
Therefore, the claim may be interpreted to mean a program listing on a sheet of paper, 
which is not considered to provide functionality and is considered to be merely a 
computer program per se, which is non-statutory subject matter. When a claim 
encompasses both statutory and non-statutory subject matter, the claim as a whole is 
directed to non-statutory subject matter. 

Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 
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2. Claims 1 -6 and 8-1 0 are rejected under 35 U.S.C. 1 02(b) as being anticipated by 
Talati et al. (U.S. Patent No. 5,903,878). 

Claim 1.. A method for protecting an identifier of a subscriber, during data transfer 
between a service provider and a content provider, when said subscriber sends a 
request to said service provider to obtain data belonging to said content provider, said 
method comprising the steps of: - upon reception of said subscriber request by said 
service provider: [Abstract, lines 3-5] - computing an encrypted token using said 
identifier of said subscriber [Column 3, lines 12-19 and lines 29-33; The TA is the 
Service Provider.]; and, - transmitting said subscriber request and said encrypted 
token to said content provider [Column 3, lines 20-21]; - upon reception by said service 
provider of a certification request comprising an encrypted token, sent by said content 
provider [Column 3, lines 21-22]: - extracting said encrypted token from said 
certification request [Column 3, lines 34-36]; - decrypting said extracted encrypted 
token to determine said subscriber identifier [Column 3, lines 34-36]; - checking said 
determined subscriber identifier [Column 2, lines 66-67]; and, - transmitting a success or 
failure indication to said content provider in response to said certification request 
[Column 3, lines 36-45;]; - upon reception of said data belonging to said content 
provider by said service provider, transmitting said data belonging to said content 
provider to said subscriber. [Column 3, lines 54-56] 

Further explanation of claim 1 : Talati et al. teach the initial request from the 
subscriber to the content provider as the general premise of their invention: "A 
transaction order generated by a purchaser has a unique transaction identifier 
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associated therewith and [in one embodiment the purchase order is transmitted to the 
merchant and then to a transaction administrator. (Abstract)." Computation of a token 
bearing user identification is described by Talati et al. as, "The electronic transaction 
includes details of the transaction such as descriptions of the item(s) that the client 
desires to purchase... and a unique transaction identifier that... is uniquely associated 
with the particular purchase transaction. (Column 3, lines 12-19)." "This 
communication between the [Service Provider] and the client may be encrypted using a 
suitable encryption method of a set of virtual keys known only to the [Service Provider] 
and each individual purchaser. (Column 3, lines 29-33)." Talati et al. show transmitting 
the request and token to the content provider by: "[The electronic transaction with 
descriptions of the items and a unique identifier] information is transmitted to the 
merchant over the network. (Column 3, lines 20-21)." Receiving a 'certification request' 
from the content provider is taught as, "In response to the purchase order, the merchant 
generates a payment authorization request for transmission to the [service provider]. 
(Column 3, lines 21-22)." Extracting and decrypting the token from the certification 
request to determine the subscriber identifier is taught as, "Upon receipt of the 
validation request, the client decodes, if necessary, the encrypted validation request 
and extracts the unique transaction identifier therefrom. (Column 3, lines 34-36)." 
Checking the determined subscriber identifier is taught as, "The transaction 
administrator [Service Provider] is an entity which authenticates entities and validates 
the content of the transaction [as previously defined] by the originator. (Column 2, lines 
65-67)." Transmitting a success or failure indication to the content provider is taught by 
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the equivocal passage in Talati et al., "The identifier is compared to a listing of 
generated transaction identifiers at the client to confirm that the client authorized the 
transaction order with which the transaction identifier is associated. (Column 3, lines 
36-39)." Talati et al. show subsequently transmitting the content provider data to the 
user (or subscriber) upon a success by, "If the information in the transaction request 
checks out, the item(s) ordered may be delivered to the [subscriber] by the [content 
provider]. (Column 3, lines 54-56)." 

Claim 2. The method of claim 1 , further comprising the step of verifying rights of said 
subscriber, wherein said steps of computing an encrypted token and transmitting said 
subscriber request and said encrypted token to said content provider are done only if 
said subscriber holds corresponding rights. [Column 3, lines 45-48; where the 'queries' 
are the transaction requests (or the content requests). The user would have to be 
registered to have such 'queries' made, thereby granting 'rights' by way of association 
with the registration.] 

Claim 3. The method of claim 1 further comprising the step of memorizing said 
encrypted token so that it can be reused without having to be recomputed. [Column 3, 
lines 45-48; the queries/tokens are memorized for use later.] 

Claim 4. The method of claim 1 further comprising the step of charging said subscriber 
if said determined subscriber identifier is certified. [Column 2, lines 55-59 and column 2 
&3, lines 66-67 & 1-2] 
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Claim 5. The method of claim 1 further comprising the step of formatting said data 
belonging to said content provider. [Rejected per 1 12, 1 st paragraph and column 3, 
lines 56-59] 

Claim 6. The method of claim 1 wherein said step of computing an encrypted token 
using the identifier of said subscriber comprises the steps of: - concatenating said 
identifier of said subscriber with a random or time varying value using a separator; and, 
- encrypting said concatenation using either a symmetric or an asymmetric encryption 
algorithm. [Column 6, lines 25-32 and column 6, lines 9-12] 

Claim 8. The method of claim 1 implemented using web service technology. [Column 
3, lines 56-59] 

Claim 9. An apparatus comprising means adapted for carrying out the method 
according to claim 2. [Rejected per claim 2.] 

Claim 10. A computer-like readable medium comprising instructions for carrying out the 
method according to claim 2. [Rejected per claim 2.] 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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4. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

5. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Talati et 
al. (U.S. Patent No. 5,903,878) and "Simple Object Access Protocol (SOAP) 1.1," W3C 
Note 08 May 2000, referred to as "W3C" hereinafter. 

Talati et al. teach the systems and methods of electronic commerce regarding 
arbitrating the transactions and maintaining user identity privacy. All the details are 
recited within the 35 U.S.C. 102(b) rejections, supra. Claim 7, which is dependant upon 
claim 1, inherits all the limitation rejections also presented as aforementioned. 
However, Talati et al. fail to mention particular protocols to be used within their 
invention, namely Simple Object Access Protocol (SOAP). SOAP is a simplification in 
communication programming. 

"Simple Object Access Protocol (SOAP) 1.1" teaches the use of SOAP circa 
2000 for use with any Internet communications methods and/or systems. Please see 
the Introduction section of W3C for confirmation. It would have been obvious at the 
time the invention was made to one having ordinary skill in the art to include SOAP with 
the invention of Talati et al. because it would have simplified the implementation of the 
system, and thereby reduced the development costs. Further, "This allows SOAP to be 
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used in a large variety of systems ranging from messaging systems to RPC. 
(Introduction, last line." 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kent L. Williams whose telephone number is 571-270- 
1376. The examiner can normally be reached on Mon-Fri 7:00-4:30 with Alternate 
Fridays Off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571^272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Williams, 3/15/2007 




